pre process binary file before injecting to splunk indexer

kannu — Thu, 21 Feb 2019 15:35:35 GMT

Hello All ,

I am having a file with .dat extension populated with binary data it it .

I am having a script as well which will convert binary to splunk readable format (ascii) .

But i need to know is there any way , That all the data which splunk Universal forwarder is reading from binary gets first injected to my script then it will show to splunk (In human readable format) . I mean to say can i pre process the data before injecting to indexer

Thanks in advance

Re: pre process binary file before injecting to splunk indexer

sduchene_splunk — Mon, 28 Oct 2019 10:41:04 GMT

I'd use splunk app PDI : https://splunkbase.splunk.com/app/1901/
Or the latest Splunk data stream processing : https://www.splunk.com/en_us/software/stream-processing.html

topic Re: pre process binary file before injecting to splunk indexer in Getting Data In

pre process binary file before injecting to splunk indexer

Re: pre process binary file before injecting to splunk indexer